Found Malicious Backdoor Script

Saved me a lot of time looking for a hackers script.
The plugin correctly identified the bad file used to inject code into theme header.php.
Allowed me to quickly close the door to the hacker, and get the site back online.